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This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims 



Claim 1 (Original): A method comprising: 

minting a stick of electronic assets by digitally signing with an issuer's 
signature a composite of user-provided data items including a user identity, a 
bottom asset from a bottom of the stick, and a length of the stick; 

spending one or more assets from the stick at one or more vendors, wherein 
each expenditure with a particular vendor involves digitally signing with a user's 
signature a first asset from the stick to be spent and passing the user-signed first 
asset along with the issuer-signed composite to the particular vendor for 
verification and subsequently passing any additional assets to be spent without user 
signature to the particular vendor; and 

depositing one or more assets collected by the particular vendor by digitally 
signing with the particular vendor's signature a composite of data items including 
the user-signed first asset and a last asset spent by the user from the stick and 
>9| passing the vendor-signed composite along with the issuer-signed composite to the 
20 issuer. 



21 
22 



Claim 2 (Original): A method as recited in claim 1, further comprising 
23 storing the stick of electronic assets in a tamper-resistant electronic wallet. 



24 
25 
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Claim 3 (Original): A method as recited in claim 1, further comprising 
storing the stick of electronic assets in an electronic wallet constructed with a 
secure-processor architecture. 

Claim 4 (Original): A method as recited in claim 1, wherein the minting 
comprises minting the stick of assets using a blind signature protocol. 



Claim 5 (Original): A method as recited in claim 1, wherein the spending 
9 1| comprises: 

io || concatenating a vendor identity with the first asset from the stick to form a 



payment request; 

signing the payment request with a signature of the user; 
submitting the user-signed payment request along with the issuer-signed 
withdrawal request to the vendor; 

accepting the first asset as payment in an event that the user and the issuer 
are verified; and 

subsequently passing any additional assets from the stick as payment to the 
vendor without digitally signing them with the user's signature; 

Claim 6 (Original): A method comprising: 

minting a stick of electronic assets by digitally signing with an issuer's 
signature a composite of user-provided data items including a user identity, a 
bottom asset from a bottom of the stick, and a length of the stick; 

spending one or more assets from the stick at one or more vendors, wherein 
each expenditure with a particular vendor involves digitally signing with a user's 

teeQftayre pit b»&mzh 3 
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signature a first asset from the stick to be spent and passing the user-signed first 
asset along with the issuer-signed composite to the particular vendor for 
verification and subsequently passing any additional assets to be spent without user 
signature to the particular vendor; and 

depositing one or more assets collected by the particular vendor by digitally 
signing with the particular vendor's signature a composite of data items including 
the user-signed first asset and a last asset spent by the user from the stick and 
passing the vendor-signed composite along with the issuer-signed composite to the 
issuer, wherein the depositing comprises: 

concatenating the user-signed first asset St/CJ), a last asset spent from the 
stick Ck, and a run length RL of assets beginning with the first asset Cj and ending 
with the last asset Ck to form a deposit request; 

signing the deposit request with a signature of the vendor 

SvfSuCQ), Ck, RL) 



submitting the vendor-signed deposit request along with the issuer-signed 
withdrawal request to the issuer, and 

crediting a vendor account with the run of assets in an event that the user, 
the vendor, the run, and the issuer are positively verified 

Claim 7 (Original); A method as recited in claim 1, former comprising 
auditing the assets deposited by the vendor. 



PAGE 6/23* RCVD AT 10/812004 1:58:54 PM [Eastern Daylight Time] * SVfcUSPTO-EFXM* DNIS:8729306 ' CSID:509 323 8979 ' DURATION (mm-ss):05-24 



OCT 08 2004 11-: 14 FR LEE - HAYES PLL 509 323 8979 TO 1703872930S P. 07/23 



9 
10 
II 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



Claim 8 (Original); A method as recited in claim 1, further comprising 
auditing a sample of the assets paid by the user to the vendor. 

Claim 9 (Original): A method as recited in claim 1, further comprising 
selecting, at the vendor, a subset of less than all of the assets paid by the user to the 
vendor and submitting the subset of assets to an auditor for fraud evaluation. 

Claim 10 (Original): Distributed computer-readable media resident at the 
issuer, user, and vendor having computer-executable instructions to perform the 
method as recited in claim L 

Claim 1 1 (Original); Computers resident at the issuer, user, and vendor that 
are programmed to perform the method as recited in claim 1. 

Claim 12 (Original): A method for issuing electronic assets, comprising: 
forming a stick of L electronic assets Q (for /=1, L) where each asset 
can be derived from a preceding asset in the stick; 

signing the stick with a signature of a party issuing the assets; 
spending a first run of one or more assets from the stick at a first vendor; 



and 



spending a second run of one or more assets from the stick at a second 



vendor. 
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Claim 13 (Original): A method as recited in claim 12, ftirfher comprising 
storing the stick of electronic assets in a tamper-resistant electronic wallet. 

Claim 14 (Original); A method as recited in claim 12, further comprising 
storing the stick of electronic assets in an electronic wallet constructed with a 
secure-processor architecture. 

Claim 15 (Original): A method as recited in claim 12, wherein the forming 
comprises anonymously issuing the stick of assets using a blind signature protocol. 

Claim 16 (Original): A method as recited in claim 12, wherein ihe foiming 
comprises: 

creating the stick of L electronic assets by computing: 
Q~h'(x) (farf=l,...,Z) 
where h(x) is a one-way hashing function of a value x. 



Claim 17 (previously amended): A method for issuing electronic assets, 
comprising: 

forming a stick of L electronic assets C, (for «, L) where each asset 
can be derived from a preceding asset in the stick; wherein the forming comprises: 
creating the stick of L electronic assets by computing: 



Q = H(x) (forr=l,.„,i:) 
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and 



where h(x) is a one-way hashing function of a value x; 

constructing a withdrawal request having a user identity U 9 a user 
secret K % a last asset value C L taken from a bottom of the stick, a 
denomination d indicating a value for the assets in the stick, an expiration t, 
and the value L; and 

Signing the withdrawal request with a signature of an issuer; 

signing the stick with a signature of a party issuing the assets; 

spending a first run of one or more assets from the stick at a first vendor, 

spending a second run of one or more assets from the stick at a second 



vendor. 

Claim 18 (Original): A method as recited in claim 12, wherein the spending 
comprises: 

signing a first asset from liie stick with a signature of the user: 
submitting ihe user-signed asset along with the signed stick to the first 
vendor; and 

in an event the first asset is accepted, subsequently submitting any 
additional assets from the stick without digitally signing them. 
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Claim 19 (Original): A method as recited in claim 12, further comprising 
auditing the assets from the first and second runs of assets for fraud. 

Claim 20 (Original): A method as recited in claim 12, further comprising 
auditing a sample of assets from the first and second runs of assets for fraud 

Claim 21 (Original): A method as recited in claim 12, further comprising 
depositing the first and second runs of assets. 

Claim 22 (Original): Computer-readable media resident at the issuer and the 
user having computer-executable instructions to perform the method as recited 
claim 12. 



m 



are 



Claim 23 (Original): Computers resident at the issuer and the user that 
programmed to perform the method as recited in claim 12. 

Claim 24 (Original): A method for issuing electronic assets, comprising: 
creating, at a user, a stick of L electronic assets by computing: 



Q-Afc; (forF=l,...,Z) 

where h(x) is a hashing function of a value x t 

submitting a withdrawal request from the user to an issuer, the withdrawal 
request having a user identity U, a last asset value Q taken from a bottom of the 
stick, and the value L, while omitting any vendor identity; 
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signing, at the issuer, the withdrawal request; and 
returning the signed withdrawal request to the user. 

Claim 25 (Original); A method as recited in claim 24, further comprising 
storing the stick of electronic assets and signed withdrawal request in a tamper- 
resistant electronic wallet 

Claim 26 (Original): A method as recited in claim 24, further comprising 
storing (he stick of electronic assets and signed withdrawal request in an electronic 
wallet constructed with a secure-processor architecture. 

Claim 27 (Original): A method as recited in claim 24, wherein the 
withdrawal request further has a user secret K 9 a denomination d indicating a value 
for the assets in the stick, and an expiration u 

Claim 28 (Original): A computer-readable medium having computer- 
executable instructions that direct an electronic wallet to perform the method as 
recited in claim 24, 



Claim 29 (Original): A computer programmed to perform the method as 
recited in claim 24. 



23 Claim 30 (Canceled) 
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Claim 3 1 (Original): A method comprising: 
creating, at a user, a stick of I electronic assets by computing; 

G^h'fx) (for^l,...,^) 

where h(x) is a hashing function of a value x; 

submitting a withdrawal request from the user to an issuer, the withdrawal 
request having a user identity U 9 a user secret K, a last asset value C L taken from a 
bottom of the stick, a denomination d indicating a value for the assets in the stick, 
an expiration t, and the value L; 

signing, at the issuer, the withdrawal request: 

S / (U,Kd,C L ,t,L) 



returning the issuer-signed withdrawal request to the user, 
initiating payment of one or more assets from the stick to a vendor having 
an identity V; 

concatenating, at the user, the vendor identity with a first asset Cj to be 
spent from the stick to form a payment request, and a depth D indicating a distance 
of the first asset from the bottom of the stick; 

signing the payment request with a signature of the user: 

Su(Cj, A VI) 
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submitting the user-signed payment request along with the issuer-signed 
withdrawal request to the vendor; 

accepting the first asset as payment at the vendor in an event that the user 
and the issuer are verified; 

subsequently passing any additional assets from the stick as payment to the 
vendor without digitally signing them with the user's signature; 

concatenating, at the vendor, the user-signed first asset, a last asset spent 
from the stick Ck 9 and a run length RL of assets beginning with the first asset Cj 
and ending with the last asset Ck to form a deposit request; 

signing the deposit request with a signature of the vendor: 

SvfSu(Cj).ChRL) 

submitting the vendor-signed deposit request along with the issuer-signed 
withdrawal request to the issuer; and 

crediting a vendor account with the run of assets in an event that the user, 
the vendor, and the issuer are verified. 



Claim 32 (Original): A method as recited in claim 31, further comprising 
randomly selecting an asset from the assets paid by the user to the vendor and 
submitting the selected asset for audit 



Claim 33 (Original): A method as recited in claim 31, further comprising 
24 auditing the assets deposited by the vendor with the issuer. 



25 
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Claim 34 (Original): A method for anonymously issuing electronic assets, 
comprising: 

creating, at a user, a stick of L electronic assets by computing: 
Q=ti(x) (forM, ...,£) 

where h(x) is a hashing function of a value *; 

blinding the stick using a random value p, where: 

Blind Stick = p e C L mod N 

where Q is a bottom asset on the stick; 

submitting a withdrawal request from the user to an issuer, the withdrawal 
request having the blind stick and the value L; 

signing, at the issuer, the withdrawal request by computing: 

c - (p°df = p L CF modN 



where e and/are public and private variables known by the issuer and 
known to everyone; 

returning the signed withdrawal request to the user, 
deriving a new bottom asset by computing: 

CF=c/p L modN. 



e is 
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Claim 35 (Original): A method as recited in claim 34, further comprising 
storing the blind stick of electronic assets and signed withdrawal request in a 
tamper-resistant electronic wallet. 

Claim 36 (Original): A method as recited in claim 34. further comprising 
verifying the bottom asset by computing ^independently and comparing a result 
to the new bottom asset derived in said deriving (C^) 

Claim 37 (Original): A method as recited in claim 34, flirther comprising 
storing the blind stick of electronic assets and signed withdrawal request in an 
electronic wallet constructed with a secure-processor architecture. 

Claim 38 (Original): A method as recited in olaim 34, further comprising 
spending an asset from the blind stick by first sending the new bottom to a vendor 
for verification. 



Claim 39 (Original): A computer-readable medium having computer- 
executable instructions that direct an electronic wallet to perform the method as 
recited in claim 34. 



Claim 40 (Original): A computer programmed to perform the method 
recited in claim 34. 

Claim 41 (Canceled) 



as 
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Claim 42 (Withdrawn): A method for handling electronic coupons, 
comprising: 

creating dual sticks of corresponding coupons including a user stick located 
s || at the user and a vendor stick located at ,the vendor, 

oil referencing at least one coupon in the user stick and at least one 

7 corresponding coupon in the vendor stick; 

all upon granting or spending a coupon, changing reference to a different 

»|| coupon in the user stick and a different corresponding coupon in the vendor stick; 
10 II and 

11 II swapping information between the user and the vendor to verify that the 

12 II coupons being referenced in the user stick and the vendor stick correspond to one 

13 | another. 

14 1 

15 ll Claim 43 (Withdrawn): A method as recited in claim 42, wherein the 

16 1 referencing comprises: 
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using a first user pointer to reference a newest coupon in the user stick and 
a second user pointer to reference an oldest unused coupon in the user stick; and 

using a first vendor pointer to reference a newest coupon in the vendor stick 
and a second vendor pointer to reference an oldest unused coupon in the vendor 
stick. 

Claim 44 (Withdrawn): A method as recited in claim 43, wherein the 
changing comprises, upon granting a newer coupon, moving the first user pointer 
and the first vendor pointer to reference the newer coupon. 



14 
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Claim 45 (Withdrawn): A method as recited in claim 43, wherein the 
changing comprises, upon spending the oldest coupon, moving the second user 
pointer and the second vendor pointer to reference a next oldest coupon. 

Claim 46 (Withdrawn): A method as recited in claim 42, wherein the 
swapping comprises exchanging data indicating which coupons are being 
referenced in the user stick and the vendor stick. 

Claim 47 (Withdrawn): Computer-readable media resident at the user 
and the vendor having computer-executable instructions that perform the method 
as recited in claim 42. 

Claim 48 (Withdrawn): Computers resident at the user and the vendor 
that are programmed to perform the method as recited in claim 42. 



Claim 49 (Withdrawn): A method for handling electronic coupons, 
comprising: 

storing a first set of coupons in a user-based data structure maintained at 



a 



user, 



storing a second set of coupons in a vendor-based data structure maintained 
at a vendor, the second set of coupons corresponding to the first set of coupons; 

using first and second user pointers to reference a first and last coupon in 
the user-based data structure; 



15 
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using first and second vendor pointers to reference a first and last coupon in 
the vendor-based data structure; 
upon earning a new coupon, 
adding the new coupon to the user-based stick; 

modifying the first user pointer at the user-based data structure to reflect the 
new coupon; 

informing the vendor; 

updating the first vendor pointer at the vendor-based data structure to reflect 
that the user-based data structure is referencing the new coupon; 

upon spending a current coupon from the user-based data structure, 
submitting the current coupon to the vendor, 

evaluating, at the vendor, whether the coupon is acceptable and if 
acceptable, modifying the second pointer at the vendor-based data structure to 
reflect expenditure of the coupon; 

informing the user; 

updating the second user pointer at the user-based data structure to reflect 
expenditure of the current coupon. 



Claim 50 (Withdrawn): An architecture for managing electronic 
coupons, comprising: 

a user-based data structure embodied on a computer-readable medium, the 
user-based data structure storing one or more coupons; 

a first user pointer to an oldest coupon in the user-based data structure; 
a second user pointer to a newest coupon in the user-based data structure; 
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a vendor-based data structure embodied on a computer-readable medium, 
the vendor-based data structure storing one or more coupons associated with the 
coupons stored on the user-based data structure; 

a first vendor pointer to an oldest coupon in the vendor-based data 
structure; 

a second vendor pointer to a newest coupon in the vendor-based data 
structure; 

wherein the user-based data structure and the vendor-based data structure 
are concurrently maintained so that (1) modification of the first user pointer to 
reference another coupon in the user-based stick results in updating and 
verification of the first vendor pointer to reference an associated coupon in the 
vendor-based stick and (2) modification of the second vendor pointer to reference 
a different coupon in the vendor-based stick results in updating and verification of 
the second user pointer to reference an associated coupon in the user-based stick. 



Claim 51 (Original): An electronic asset system comprising: 
an issuer wallet having a processor and storage, the issuer wallet digitally 
signing with an issuer's signature a composite of user-provided data items 
including a user identity, a bottom asset from a bottom of a stick of electronic 
assets, and a length of the stick; 

a user wallet having a processor and storage to store the stick of electronic 
assets and issuer-signed composite and to spend one or more assets from the stick 
at one or more vendors, the user wallet spending one or more assets by digitally 
signing with a user's signature a first asset from the stick to be spent and passing 
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the user-signed first asset along with the issuer-signed composite to the vendor for 
verification; whereupon verification, the user wallet subsequently passes any 
additional assets to be spent without user signature to the vendor, and 

a vendor wallet having a processor and storage to store one or more assets 
spent by the user wallet, the vendor wallet depositing the assets collected from the 
user wallet by digitally signing with the particular vendor's signature a composite 
of data items including the user-signed first asset and a lasrasset passed in the 
stick received from the user wallet and passing the vendor-signed composite along 
with the issuer-signed composite to the issuer wallet for verification. 

Claim 52 (Original): An electronic asset system as recited in claim 51, 
wherein the issuer wallet, the user wallet, and the vendor wallet are tamper- 
resistant. 

Claim 53 (Original): An electronio asset system as recited in claim 51, 
wherein the issuer wallet, the user wallet, and the vendor wallet are tamper- 
resistant constructed with a secure-processor architecture. 



Claim 54 (Original): An electronic asset system as recited in claim 51, 
wherein the issuer wallet signs the composite using a blind signature protocol. 

Claim 55 (Original): An electronio asset system as recited in claim 51, 
further comprising an auditing system to audit the electronic assets to detect 
whether assets have been used in a fraudulent manner. 
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Claim 56 (Original): An electronic asset system as recited in claim 51, 
further comprising a probabilistic auditing system to sample a subset of less than 
all electronic assets to detect whether assets have been used in a fraudulent 



manner. 
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Claim 57 (Original): An electronic wallet having memory and a processor, 
the electronic wallet being programmed to: 

create a stick of Z electronic assets by computing: 

Q=h i (x) (for/-I,.„,Z) 

where h(x) is a hashing function of a value jc; 

form a withdrawal request having a user identity U, a last asset value C L 
taken from a bottom of the stick, and the value Z, while omitting any vendor 
identity; 

submit withdrawal request to an issuer and receive the withdrawal request 
back with an issuer signature; and 

store the signed withdrawal request and the stick. 

Claim 58 (Original): An electronic wallet having memory and a processor, 
the electronic wallet being programmed to: 

create a stick of Z electronic assets by computing; 



Ci = H(x) (forr=l,...,Z) 
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where h(x) is a hashing function of a value x; 

form a withdrawal request having a user identity t/, a last asset value C L 
taken from a bottom of the stick, and the value Z, while omitting any vendor 
identity; 

submit withdrawal request to an issuer and receive the withdrawal request 
back with an issuer signature; 

store the signed withdrawal request and the stick; 

form a payment request for payment of one or more assets from the stick to 
a vendor having an identity V 9 the payment request having the vendor identity V 
and a first asset Cj to be spent from the stick; 

sign the payment request: 

submit the signed payment request along with the signed withdrawal 
request to the vendor. 

Claims 59-60 (Canceled). 



tooOftAycs^ ton 



20 



PAGE 22/23 * RCVD AT 10/9/2004 1:58:54 PM [Eastern Daylight Time] * SVR:U8PT0-EFXRF-1/4 * DNIS:8729306 * CSID:509 323 8979 * DURATION (mm-ss):05-24 



